my first thought was that the document record would have an `author` field, but that's not the case
then I thought it'd make sense to have the author publish the document, but that also doesn't work (makes sense from a security standpoint; otherwise I could "publish" to anywhere)
double opt-in?